Please consider implementing dynamic port forward with socks as in ssh.

[sjmunizsantex]

While the portforward over aws ssm is useful, it would incredibly useful to have a socks proxy instead a port forward.

What I'd like to have is something similar to:
ssh -D <port> where port starts listening as a http socks proxy you can configure in your browser to tunnel any and all traffic over it.

This allows for http to https redirects and more in general reach internal servers without needing to create a new portforward for each one.

¡Thanks!

[joy13975]

With the setup according to this I was able to do ssh -ND <port> <host> and use it as a socks proxy.

What's not working for you?

[basigabri]

Needs to be through SSM agent, without any Public IPs assigned to the Instance. You were able to do this through ssm connection ?

[joy13975]

@basigabri Yes. No public IPs, just SSH over SSM.
The test was done on Max apple silicon, and server is Amazon Linux. I was able to see private subnet web server on browser when going through the SOCK5 port.

[yuting-fan]

Thanks @joy13975 for sharing. @basigabri @sjmunizsantex please let us know if you run into issues following @joy13975 's suggestion.